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DETAILED ACTION 

1 . This Office Action is in response to Applicant's amendment filed on August 16, 
2007. Claims 73-92 are pending. 

Response to Arguments 

2. Response to Applicant's remarks on pages 7-9 with respect to claim 73. 
Applicant contends that the cited prior art, Obenhufer and Farah do not teach the 
limitations of: 

"wherein said decrypted data includes a request for a web page accessible via a 
second Internet domain that is different from the first Internet domain, wherein said 
request includes both an encrypted address of said web page and an unencrypted 
address that is within a third Internet domain, wherein said third Internet domain is 
different from said second Internet domain, wherein said third Internet domain is 
different from said second Internet domain". Examiner respectfully disagrees. In Col. 5, 
lines 44-51, Obenhufer discloses incoming or outing data packets are checked against 
a proxy table to determine whether to route forward the data packet or to drop the data 
packet (also see Fig. 7). Farah discloses preventive measure for anti-prving in the 
WWW to prevent anv from spv at what another user is browsing at the moment by 
intercepting his packets and looking at their content ("sniffing") (Farah, Introduction, 
page 1 ). Farah discloses both URLs and content transferred are to be 
encrypted/decrypted using the R0T13 mechanism (Farah, page 2, first paragraph). If 
the data packet is destined for the internet through a proxy and the role of a commonly 
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known proxy server is acting on behalf of a third party. Therefore, it would have been 
obvious that when the client (from third domain) to the proxy server (first domain) 
requesting webpage from a different server (second domain) where the URL of the 
webpage would be benefit from being encrypted because it would contain user's 
browsing information that is needed to take preventive measure from being spying as 
taught by Farah. In addifion, it is common that the sender (the client), the receiver (the 
proxy) and the resource (webpage) are commonly contained in the data packet and 
would have been obvious that the client, the proxy and the source each located in a 
different domain. Therefore, in light of this interpretafion of the claimed limitation and 
the cited prior art. Examiner maintains the rejection. 

Claim Rejections • 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skiW in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 73-77 and 79-84 and 89-92 are rejected under 35 U.S.C. 103(a) as being 

unpatentable over Obenhuber et al. (U.S. Patent No. 6,144,638) in view of Farah 

("Encrypted Hypertext Transfer Protocol-UGGC/1.0", April, 2000, Network Working 

Group", pages 1-5). 

In respect claims 73, 74, 76, 81-84, 89 and 90, Obenhuber discloses a method, a 
server system and a computer-readable memory medium comprising: 
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At a server outside of a firewall, receiving over a secure connection, encrypted 
data from a computer behind said firewall (see Fig. 4 and col. 4, lines 1-50), 

wherein said server is accessible via a first Internet domain, wherein said 
receiving over said secure connection includes decrypting said encrypted data 
according to a protocol specified by said secure connection to produce encrypted data, 
said server decrypting the encrypted address of the web page; 

responsive to said decrypting, said server retrieving the web page via the second 
Internet domain; and said server sending data to said computer over the secure 
connection via the firewall, wherein said sending data includes encrypting said data, 
wherein said encrypted data includes said retrieved web page (see col. 4, lines 20-35). 

Obenhuber does not disclose wherein the request includes both an encrypted 
address of the web page and an unencrypted address of a third Internet domain that is 
different from said second Internet domain. However, Farah discloses encrypting the 
URL address or partially encrypting the URL address (see Farrah, pages 2-3). 
Furthermore, 

Official Notice is taken that URL address containing addresses from at least one 
domains (e.g. URL that contains source host with partner site). Therefore, it would have 
been obvious to one of ordinary skill in the art at the time the invention was made 
incorporate the partial encryption of Farrah by encrypting the webpage in the URL in 
order to protect the directory of the requested files. 
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In respect to claims 75 and 91 , Obenhuber and Farrah do not disclose wherein 
the third Internet domain is the same as the first Internet domain. However, it is old and 
well known to include returned address in the file request. Therefore, it would have 
been obvious to concatenate the returned uri of the user request in the request in 
unencrypted form taught by Farrah's partial encrypted URL as a matter of design. 

In respect to claim 77, Obenhuber further discloses wherein said protocol 
specified by said secure connection is SSL (see col. 9, lines 20-25). 

In respect to claims 79 and 92, Obenhuber does not disclose providing 
advertisement to the computer. However, Official Notice is taken that providing 
advertisement to the computer over the Internet in exchange for service provided is old 
and well known. It would have been obvious to one of ordinary skill in the art at the time 
the invention was made to implement advertising feature to Obenhuber's customer 
system in order to exchange for service provided. 

In respect to claim 80, Obenhuber further discloses providing information 
regarding one or more web pages requested by said computer to one or more third 
parties (see col. 4, lines 1-9). 

4. Claims 78 and 85-88 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Obenhuber et al. (U.S. Patent No. 6,144,638) in view of Farah ("Encrypted 
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Hypertext Transfer Protocol-UGGC/1.0", April. 2000, Network Working Group", pages 1- 
5) and further in view of Subramaniam et al. (U.S. Patent No. 6.640.302, hereinafter 
Subramaniam), 

In respect to claims 78 and 85-88, Obenhuber does not disclose modifying 
computer code associated with the retrieved web page to cause subsequent requests 
from the computer that are related to the retrieved web page to be sent to the third 
Internet domain instead of the second internet domain. However, Subramaniam 
discloses redirection capability to redirect from one domain to another domain (see col. 
9, lines 22-60). It would have been obvious to one of ordinary skill in the art at the time 
the invention was made to implement the redirection signal taught by Subramaniam with 
Obenhuber's providing users with access to public work for the benefit of promoting the 
use of secure connection (see col. 9, lines 23-25). 

Conclusion 

5. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 . 1 36(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
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the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 
Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Tongoc Iran whose telephone number is (571 ) 272- 
3843. The examiner can normally be reached on 8:30-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kambiz Zand can be reached at (571 ) 272-381 1 . The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-dlrect.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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